Two-factor authentication is required on every Acquit account, so you’ll be prompted to set it up the first time you sign in. You can manage it any time under Settings → Security.
Three methods satisfy it:
- A passkey (recommended): Face ID, Touch ID, Windows Hello or a security key. One tap, no codes, and it counts as full two-factor authentication on its own. See “How do I sign in with a passkey?”.
- An authenticator app: scan the QR code with Google Authenticator, Microsoft Authenticator, Authy or 1Password, then enter the 6-digit code to confirm.
- Microsoft sign-in: your work account already does multi-factor authentication at the provider, so it satisfies the requirement automatically.
Tip: If you use an authenticator app, tick Remember this device at sign-in (on by default) so you’re not asked for a code on that device for 60 days.
Backup codes
Generate Backup Codes from the Security section: one-time codes that let you sign in if you lose your authenticator. Each code works once, so store them somewhere safe.